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(54) [Title of the Inventioni Facsimile 


[Purpose] To inplemoit signature and scramble processing by 
partially modifying and adding !q>plication software in the 

card FAX system. 


[Constitution] 

It comprises of a means for embedding a signature sentence in 
a part of the image data in order to demonstrate legitimacy of 
die smdo- and the transmitted document, and a means for 
iq>plying a scramble processing to the encoded image data. 
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A proposed confidentiality protected system 
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[Scope of the Claims] 
[Claim 1] 

A facsimile characterized in that it comprises of a means for embedding a signature sentence in a part of the image 
data in oider to demonstrate legitimacy of the sender and the transmitted document, and a means for applying a 
scramble processing to the encoded image data. 
[Detailed Description of the Invention] 
[0001] 

[Industrial Field of Application] 

The present invention relates to a facsimile having confidentiality protection functions by signature and 
scrambling. In particular, it relates to a facsimile generally called a card FAX using a personal computer (herein 
after abbreviated as PC) as a communications means. 
[0002] 
[Prior Art] 

A great revolution has occurred in the concept of document communications by the invention of facsimile 
communications. In a modem society requiring high speed, the facsimile has become an indispensable 
communications means^'\ However, along with increased values of utilization of facsimiles in document 
conmiunications, the necessity of measures for confidentiality protection such as reUability of senders and document 
transmitted has also increased. That is, from general documents to important documents, confidentiality protection 
measures are required by the documents based on their purposes. In the current facsimile communications based on 
the CCITT standards, no measures have been taken regarding confidentiality protection in documents from facsimile 
terminals regarding transmitted data. The following operational problems have been pointed out: (1) error transfer 
due to dialing errors and danger of information leaks by a third party at the receiver side, (2) third party invasion 
without permission such as direct mail including advertisements and a variety of kinds of announcements cannot be 
avoided, and (3) diere are no protections against wire tapping and altering on the conmiunications network. 
Recently, special adaptors having authentication fimctions for senders and sent documents have been developed in 
order to prevent wire tapping and interception. 

[0003] On the other hand, due to r^id progress in microelectronics technology, high functionality PCs can be used 
at low cost and attempts to use PCs that have been used independently as communications means as well have been 
made actively. This trend has been adapted due to the reasons that it is more economical than purchasing and 
utilizing a special conmiunications terminal separately and that data processing and storage fimctions of PCs can be 
used additively. Facsimile communications using PCs have already been used in practice as in the use of extension 
board type conmiunications adaptors called a card FAX (or PC FAX) and its effectiveness has been demonstrated. 
[0004] Now, Figure 1 shows an example configuration of the conventional card FAX. A card FAX is the most 
compact communications adaptor that enables facsimile communications immediately if it is inserted through the 
extension slot of a PC to be connected to the telephone line. In terms of hardware, a NCU (network control unit) 
and a modem for control signals and image signals are loaded on an extension board which functions as a 
communications interface. On the other hand, attached apphcation software generally implements transfer control 
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and encoding functions of image data. In the case of a card FAX, the software also functions to convert text data to 
image data and encoded data so that the documents prepared by word processing programs can be sent directly by 
facsimile communications. In this report, we focused on the greatest advantage of facsimile communications using 
a PC, that is, the degree of freedom of additively implementing various functions using the software, and attempted 
to have security functions with the card FAX. In addition to the conventional general functions such as 
sending/receiving, reading the document, converting files, and outputting documents, the present invention 
implements a signature showing legitimacy of the sender and the transmitted document, and a scramble function for 
the purpose of confidentiality of the document by using software. 
[0005] 

[Problems to be Solved by the Invention] On the assumption that a card FAX using PCs will become a powerful 
communications means in the future, a card FAX having security functions will be required. The purpose of the 
present invention can be implemented by only partially modifying and adding apphcation software in the current 
card FAX system and signatures and scrambling can be implemented by the software using the processing functions 
of a microprocessor. 
[0006] 

[Means for Solving the Problems] To solve the aforementioned problems, the facsimile that the present invention 
provides comprises of a means for embedding a signature sentence in a part of the image data in order to 
demonstrate legitimacy of the sender and the transmitted document, and a means for applying a scramble processing 
to the encoded image data. 
[0007] 

[Examples] Figure 2 is a block diagram showing a confidentiality protection system in the present invention's 
facsimile. The sender side consists of a signature process and an encoding process, and the receiver side consists of 
an authentication process and a decoding process. 

[0008] In the signature process at the sender side, a signature is applied to a part of the input document in order to 
demonstrate legitimacy of the sender and the transmitting document. That is, for a part of the document image data 
stored in the memory, for example, for the area where the name and address of the sender is stored, a signature 
sentence is embedded by the processing functions of the microprocessor and encoded to be transmitted. The 
encoded data of a part of the document where the signature is embedded is directly sent without scrambling. Thus, 
the document header (header part) can be read as normal. In this process, the sender inputs a signature ciphering 
key Ko and signature sentence Nj along with the transmitting document Mi. When the signature process (embedding 
the signature sentence) is completed, a first scramble key Kl in the encryption process is generated to shift to the 
encryption process. 

[0009] In the encryption process, a scrambling process is appUed to the image data encoded by the key Ki (i = 1 , 2, 
. . ..) generated from the sequential image data. A method of scrambling will be described later. The encoded data 
(binary) generated by blocking by the unit of power of 2 are followed by transposition encryption to be transmitted. 
[0010] On the other hand, in the authentication process at the receiver side, a signature ciphering key Ko common 
to the sender and the receiver is input and the sender and the transmitted document are confirmed by legitimacy of 
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the signature sentence Nj extracted from the received data F (Mi). If the signature sentence N, is a data having a 
meaning, the legitimacy of the sender and the transmitted document are confirmed and shifts to the decoding process 
based on the decoding key Ki generated. In contrast, if Nj is not a data having a meaning, the sender or the 
transmitted document is determined to be not legitimate and the subsequent processing is interrupted and the 
received document is aborted. 

[001 1 ] In the decoding process, the encrypted received data is reverse-scrambled in blocks as units based on the 
key Ki (i=l, 2,...) generated from the sequentially decoded image data so that the encoded data are transformed to 
image data. 

[0012] In the proposed system as described above, only the sender and the receiver cipher manage the common 
key Ko. In addition, the scramble (reverse-scramble) key Ki (i=l , 2, . . .) are sequentially generated during the 
processing process depending upon the structure of the document image so that it is difficult for the third party who 
does not know the signature, the structure of the encryption function, and the cipher key Ko to detect this. 
[0013] 

[Signature method] 

[Embedding of a signature sentence] The signature indicating the legitimacy of the sender and the 

transmitting document is carried out by directly embedding the signature sentence into the digitalized document 
image data. That is, fi-om the image data resolved into the scaiming lines, the scanning lines designated randomly by 
the keys are referred and the oddness/evenness of the distance among the variable pixels on the reference scanning 
lines and encoded scanning lines are modulated by 1 bit of signature data. 

[0014] Initially, variable pixels on the encoded scanning lines and s pieces of reference scanning lines are defined 
as follows (See Fig. 3). 

al : First variable pixel of the target run length (hereinafter referred to as RL) on the encoded scanning lines. In this 
case. No. 1 RL is excluded. 

bl(j): Same color (as al) variable pixel to corresponding to al on the j-th (1 <s) reference scanning line. That is, 
if the pixel immediately above al is in the same color as al , the first pixel of the previous RL, if the pixel 
immediately above al is in an opposite color fmm al , the first pixel of the RL located right of al . 
^ (al bm): a distance between the variable pixel al and bm (j) 

0j: indicates even/oddness of Aj (al bm). 0, if Aj (al bl) is an even number and 1 , if Aj (al bl) is an odd number. 
[00 15] In the signature keys of r bits: 
KO={kO(tO) |tO = 0, l,...,r-l; 

kO(tO) = 0, 1 (1) 
if kO (tO) = 1, a length of the bit fmm immediately before kO (tO') = 1 to kO (tO) = 1 

j = tO-tO' (2) 
(where at first kO (tO) = 1 , a distance between j = tl and variable pixel bl (j) on the j-th reference scanning line is Aj 
0+1). Then, 1 bit signature data ns (u) extracted fix)m q bit signature sentence 

Ns={ns(u) I u=0, l,...q-l;ns(u) = 0, 1} (3) 
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if embedded in the even/oddness 0j of the variable pixel a (al bl) on the encoded scanning lines by the following 
procedures. 

(1) If 2^ (al bl) > 0; (bO al) >1 and Aj (bl a2) >1 are satisfied, 

(a) Directly if 0j xORns(u) = 0 

(b) Shifts to the right by the portion of one pixel if 0j x ORns (u) = 1 

(2) If 4j (al bl) ^; ^ (bO al) >- Aj (al bl) + 2 is satisfied, 

(a) Directly if 0jx ORns (u) = 0 

(b) Shifts to the left by the portion of one pixel if 0j x ORns (u) = 1 
However, if kO (tO) = 0, signature data is not embedded. 

[0016] The signature data embedded in these procedures can be easily decoded in the following procedures: 

(1) If^ (al bl) > 0; ^(bO al) >1 and Aj (bl a2) ^1 are satisfied, 
ns (u) ' 0j 

(2) If (al bl) :S0; ^ (bO al) ^ Aj (al bl) + 2 is satisfied, 
ns (u) = 0j 

And then, the extracted 1 bit signature data ns (u) is assembled as a signature sentence Ns. The aforementioned 
regulations (1) and (2) are given in Equation (5). 

[001 7] Since the signature sentence is embedded depending upon the structure of the document image (RL pattern 

over several scanning lines), it is difficuh for the third party to forge or alter the document image Mf 

[0018] 

[Generation of scramble keys] Next, a method of generating the scramble keys JCi (I = 1 , 2, . . .) in the 
encryption process will be described below. Ki , based on Ki-1 used immediately before (initial signature key kO), 
is generated fit)m Ae structure of the document image data. Initially, regarding the maximum number of reference 
scanning lines s, a minimum integer value h satisfying 

s (6) 
is calculated and given as hO. 

From the bit series of the inmiediate key Ki-1 , next hO pieces of bits 

{ki-1 ((ti-1 + a) mod r) | a=0, 1, ...hO-1} (7) 
are extracted and then transformed to decimal dO. Next, 
according to 

l = (dO+l)mods (8) 
a reference scanning line number 1 is determined. The even/oddness 01 of the distance Al (al bl) between the 
variable pixel al on the encoded scanning lines and the variable pixel bl (1) is determined and then 
kl (tl) = 01 is given. This operation is continuously repeated r times to obtain scramble keys 

Ki={ki(ti) |ti = 0, 1 r-1: Ki(ti) = 0, 1} (9) 

[001 9] In this report, the scramble method wherein the data encoded by sequentially generated keys depending 
upon the structure of the document image is ti-anspositioned is used. An actual method will be shown below. 
[0020] 
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[Scramble method] 

[Concept of encryption] An encrypted sentence obtained by encryption of a plain sentence M by the key K is 
expressed as 

C = E(K,M) (10) 
In the transposition method in the conventional hardware, the structure of E is fixed so that the degree of freedom of 
transposition is fully dependent upon the degree of freedom of the key 

Ci = D(Ki,M)(i = l,2, ...) (11) 
was obtained. In contrast, according to the present method, E is configured by a software system. If the key Ki is 
input, the system automatically generates and orients different partial encrypter (decoder) Eij and partial key Kij (i = 
1 , 2, . . .3 = 1 , 2, . . .n) and they are further combined to output 

C = Eil (Kil, Ei2 (Ki2....Ein (Kin, M))...) (12) 
[002 1 ] In the present system. Equation ( 1 2) is implemented by the following procedures. Initially, when the 
scramble keys Ki (I = 1 , 2, . . .) are input, Eij and Kji are developed in the memory using a portion of K's. As shown 
in Fig. 4, a portion of the bit series of keys Ki is used as a machine language program and the subsequent series are 
used as a partial key. Next, the encoded data stored on the memory is blocked by units by powers of 2, and using 
the program generated, scrambling is executed using the coordinate values of the individual data in the blocks as 
arguments. Using the operation results as new coordinate values, the encoded data are output. After transposition of 
one block is completed, a scramble key Ki+1 for the next block is output along with the encrypted series and the 
same processing is repeated based on Ki+1 . The flow of this process is shown in Fig. 5. 

[0022] Each of Eij used must be a mapping function of bijection (1:1) due to the necessity of configuring the block 
transposition encryption on the whole. Therefore, in the present system, basic operation instruction and the 
extended operation of the central processing unit (CPU) are selected as Eij. As a result, an encrypter and a decoder 
can perform a high speed transposition processing using only a small amount of memory 

[0023] 

[CPU instruction to become a bijection mapping function] 

Among the instructions of the CPU such as addition/subtraction/multiplication/division, those configuring a 
bijection mapping between the numbers operated and the operation results are limited. The CPU instructions used 
are listed below. In this case, the length of the resister of the CPU generating the aforementioned scrambler is 
expressed as R. Therefore, the addressing range in this resister is 0 ~ 2R-1 and a one block to be input has this size 
as a unit. 
[0024] 

[Exclusive OR] 

A processing of performing an exclusive OR operation for the constant (encryption key) provided for each bit and 
every bit in the register is a bijection. If this operation is expressed by XOR, number to be operated is M, and the 
key constant is Kxor, the operation results are expressed by 

C = XOR(KxoR,M) (13) 

Obviously, 
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M = XOR(KxoR,C) (14) 
In this operation, respective data having two coordinate values M and C with the relationships expressed by- 
Equation (1 3) or Equation (14) are replaced by each other. That is, all the data in the block are substituted by the 
pairs satisfying the aforementioned relationships. 
[0025] 

[Left/Right Rotation] 

The bits in the register are shifted by the specified number of bits in the specified direction, and the places expelled 
out of the register are input fi-om the opposite side, in an operation called a rotation operation that is a bijection. The 
left rotation is expressed by ROL and right rotation is expressed by ROR. 
[0026] 

[Addition/subtraction] 

A processing of adding and subtracting the data in the register is also a bijection. The addition is expressed by ADD 
and the subtraction is expressed by SUB. Generally in an arithmetic operation instruction such as ADD, when the 
results are overflowed from the places, flag registers are affected. However, only the data in the register is 
considered by ignoring this point, 

C = ADD(KADD,M) = M + KADDmod2'^ (15) 
That is, individual data are shifted in parallel for a distance of Kadd- In addition to the aforementioned CPU 
instructions constituting the bijective mapping, the following extension operation becomes also a bijective mapping 
and improves the transposition effect. 
[0027] 

[Replacement of bit positions] 

A processing of replacing the bits in the register to specific positions is also bijection. This operation is expressed 
byEXTl below. The keys Kextti (0(1=0. 1, ..R-1) are an array consisting of Rpieces of elements corresponding to 
the length of register R and the respective values indicate positions of bits when they are shifted. 
[0028] 

[Positions in each subspace] 

The entire address space expressed by the length of register R is partitioned into subspaces and when a bijection is 
operated in each subspace, the entire transposition is a bijection. As a method of partitioning into subspaces, there is 
a method of shortening the register length, and a method of classification by the pieces of each bit included in the 
register. Here, we used subspaces in the latter group. The operable ROL is appHed in the subspaces and expressed 
as EXT2. However, it is applied to the subspaces excluding the cases when all bits in the register are bit 1 or 0. 

Thus, the keys Kexh (i) (i = 0, 1 R-2) is an array consisting of R-1 pieces of elements where R is the length of 

the register, and the first element indicates the key ROL which is applied to the subspace where i pieces of bits 1 are 

present in the register. 

[0029] 

[Encrypter/decrypter] 
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The encrypter and the descriptor given by Equation (12) generate machine language instructions and their operands 

from the bit series of keys Ki (I = 1, 2 ). 2 or 3 bits are input from Ki and n-step of a group of instructions are 

generated based on the transformation table shown in Table 1 and developed as a series of partial encrypters Eij (j = 
1 , 2 , .... n) in the coded domain of the main memory. In this case, an operand required in each transposition 

operation, that is partial keys Kji 0 = 1.2 n) is obtained from the bit series of Ki. However, the number of steps 

n of the encrypter is set in advance. For example, if the length of register is R = 16 bits, the number of bits of partial 
keys required in each operation are as shown in Table 2. 
[Table 1] 

Transformation table 


Input bits 

Output codes 

110 

XOR 

000 

ROL 

001 

ROR 

010 

ADD 

Oil 

SUB 

111 

EXTl 

10 

EXT2 

Number of bits of partial keys required for operation 

Codes 

Number of bits required 

XOR 

16 

ROL 

4 

ROR 

4 

ADD 

16 

SUB 

16 

EXTl 

64 (=4x16) 

EXT2 

60 (=4x15) 


[0030] 

[Actual procedures for signature and encryption] In the present example, the confidential data between the 

sender and the receiver is (s, n, KO). The actual procedures are described below. 

[0031] 

[Signature process] Step 1 : Enter a document image Mi, a signature key KO and a signature sentence Ns 
while keeping tO 0, tl 0, u 0. 

Step 2: s pieces of scanning lines are stored in the memory and encoded and transmitted. 

Step 3: The processes from Step 4 to Step 9 are repeated until completing embedding of the signature sentence Ns. 
Step 4: The processes from Step 5 to Step 8 are repeated until completing scanning of the encoding scanning lines. 
Step 5: Detects a variable pixel al. 

Step 6: hO bits containing kO (tO) are extracted fix)m KO and converted to decimal dO, and 1 is decided fix)m Equation 
(8). A variable pixel bl on flie first reference scanning line is detected and kl (tl) <- 01 is given, tl *- tl + 1 is 
also given. 
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Step 7: If kO (tO) = 1, a length of bit j from the immediately before kO (tO') = 1 to kO (tO) = 1 is determined by 
Equation (2). A variable pixel bl® on the j-th reference scanning line is detected and the signature data ns (u) is 
embedded by Equation (4). When ns (u) is embedded, u <- u + 1 is given. 
Step 8: to <- (tO + 1) mod r is given. 

Step 9: The encoded scanning lines are encoded and transmitted as well as the encoded scanning lines are updated to 
the first reference scanning line and the v-th reference scanning line is updated to the v+1 reference scanning line (v 
= 1,2 s-1). 

Step 10: Shifting to the encryption process. 
[0032] 

[Encryption process] Step 1 : Select i = 1 , input n. 

Step 2: Step 3 to Step 8 are repeated until all encoded data are completed. 

Step3:Setti- Oandti+l«- 0. 

Step 4: Step 5 to Step 8 are repeated until the amount of encoded data exceeds 2** bits or more. 
Step 5: Step 6 to Step 7 are repeated until scanning of the encoded scanning lines are completed. 
Step 6: A variable pixel al is detected. 

Step 7: hO bits containing ki (ti) are extracted from Ki and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl^** on the first reference scanning line is detected and ki+1 (ti+1) «- 01 is given, ti =( ti + 1) 
mod r, t i+1 = (t i+1 +1) mod r are given. 

Step 8: The encoded scanning lines are encoded as well as the encoded scanning lines are updated to the first 
reference scanning line and the v-th reference scanning line is updated to the v+1 reference scanning line (v = 1, 2, 
s-1). 

Step 9: n-step fransposition encrypter is developed from Ki to the encoded domain of the main memory. 

Step 10: The coded data at the address m (= 0 ~2^ - 1) are transpositioned at the address m' (=0-2*^-1) on the 

buffer memory provided separately by the generated encrypter, and then output and transmitted from the address 0 

in the order, i «- i + 1 . 

[0033] 

[Authentication process] Step 1 : Enter received data F (Mi) and authentication key KO, while keeping tO «- 0, tl 
- O.u- 0. 

Step 2: Decode the encoded data for the portion of s scanned lines and store them in the memory to be used as 
reference scanning lines. 

Step 3: Step 4 to Step 10 are repeated until decoding of signature Ns is completed. 
Step 4: Encoded data is decoded for the portion of 1 scanning line to use as encoded scanning line. 
Step 5: Step 6 to Step 9 are repeated until scanning of the encoded scanning lines is completed. 
Step 6: A variable pixel al is detected. 

Step 7: hO bits containing kO (tO) are extracted from KO and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl^" on the first reference scanning line is detected and kl (tl) 01 is given, tl tl + 1 is 
also given. 
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Step 8: IfkO(tO)= 1, a length of bit j from the immediately before kO (tO') = 1 tokO(tO) = 1 is determined by 
Equation (2). A variable pixel bl^^ on the j-th reference scanning line is detected by Equation (5) and the signature 
data ns (u) is extracted. When ns (u) is extracted, u u + 1 is given. 
Step 9: to «- (tO + 1) mod r is given. 

Step 10: The encoded scanning lines are updated to the first reference scanning line and the v-th reference scanning 
line is updated to the v+1 reference scanning line (v = 1, 2, s-1). 

Step 11 : If Ns is legitimate, shifting to the decoding process, otherwise, the received data F (Mf) is aborted. 
[0034] 

[Decoding process] Step 1 : Select i = 1 , input n. 

Step 2: Step 3 to Step 8 are repeated until all encoded data are completed. 

Step 3: 2*^ bits are extracted from the received data F (Mi) and set ti 0 and t i+1 *- 0. 

Step 4: A n-step transposition encrypter is developed fix)m Ki to the encoded domain of the main memory. 

Step 5: The received data at the address m (= 0 -2*' - 1) are transpositioned at the address m' (= 0 ~2^ - 1) on the 

buffer memory provided separately by the generated decoder, and then output from the address 0 in the order, i *- i 

+ 1. 

Step 6: The decoded data are converted to image data and the Step 7 to Step 10 are repeated for the scanning lines 
converted. 

Step 7: Step 8 to Step 9 are repeated until scanning of the encoded scanning lines is completed. 
Step 8: A variable pixel al is detected. 

Step 9: hO bits containing Id (ti) are extracted from Ki and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl™ on the first reference scanning line is detected and W+l (ti+1) ♦- 01 is given, ti =( ti + 1) 
mod r, t i+1 = (t i+1 +1) mod r are given. 

Step 10: The encoded scanning lines are updated to the first reference scanning line and the v-th reference scanning 

line is updated to the v+1 reference scanning line (v = 1, 2 s-1). 

[0035] 

[Investigating the scrambling effect] 

In order to investigate whether the 0. 1 bit series of encoded data output as the result of the execution of the said 
scrambling procedures are sufficiently random, with respect to the number series of the M series by the feedback 
shift resister that has been proven to have sufficient pseudo- randomization, the properties were compared. 
However, a MH system was used as an encoding method for the facsimile document, and CCITT Test Chart No. 4 
was used as an input document. 

[0036] (1) Probability of occurrence of sequential pieces 

"Sequential" means a line segment consisting of p sequential pieces of 1 or 0 in the binary series and both ends are 
either 0 or 1 . In the M series, with respect to the 1 or 0 sequential pieces, the following formula (16) is expressed: 

(Sequential pieces with a length p) / (Sequential pieces with a length p + 1 ) = 2 (16) 
On the q-step shift register, this condition is satisfied except for the cases when a length is q and q-1 . The sequential 
status was investigated for the encoded data of the MH system and when the data were scrambled with a register 
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length R of 16 bits with a basic instruction steps n of 32. Figure 6 shows the results of logarithmic graphs of the 
sequential pieces plotted based on log 2. The dotted line indicates the result for the equivalent steps (16 steps) of the 
shift register. According to this result, the data series scrambled by the present method demonstrated excellent 
results in the case of a shift register with respect to the sequential pieces. If n increased, better results were 
confirmed to be obtained. 
[0037] (2) Autocorrelation fiinction 

Next, randomized properties of the scrambled data series were investigated using the discrete type autocorrelation 
fiinction defined by the following equation^"^ 
[Formula 1] 

j 2 j + 1 r-j ^ 

where {y,} indicates a term in the binary series, and h is a distance between the two terms {y,} and {yr^h} 
ifh ?sO,Co(h) = 0 

ifh = 0,Co(h) = l (18) 

The randomized properties of the series can be characterized as shown above. The respective autocorrelation 
fiinctions were obtained for the encoded data of the MH system and when the data were scrambled with a register 
length R of 16 bits with a basic instruction steps n = 32. The results are shown in Fig. 7. The operation results of 
the present method were found to satisfy Equation ( 1 8) similarly in the case of the autocorrelation fimction of the 
shift register as indicated by the dotted line. 
[0038] 

[Effects of the Invention] 

As was explained in detail in the aforementioned example, in the present facsimile system, (1) a signature is applied 
by embedding a signature sentence indicating legahty of the sender and the transmitted document in a part of the 
image data, and (2) a scramble processing is applied to the encoded image data. By employing these methods, an 
extension board type FAX adaptor implemented by the present invention is simple in terms of hardware so that it is 
available at a low cost. Therefore, when compared to an adaptor specialized for confidentiality protection, security 
conmiunications can be implemented at a low cost. In addition, the scrambling processing is carried out by blocking 
the encoded data in units of powers of two for transposition ciphering so that the advantage is that data is not limited 
by various encoding methods such as MH, MR and MMR for facsimiles and the quantity of transmission codes. In 
addition, the present invention's facsimile system can be inq)lemented only by partially modifying and adding to the 
application software used in the currently used card FAX system. As a result, security communications can be 
implemented at a lower cost than a special adaptor for confidentiality protection. 
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[Brief Explanation of the Drawings] 

[Fig. 1] A diagram showing the configuration example of the conventional card type FAX. 
[Fig. 2] A diagram showing the confidentiahty protection system as an example of the present invention. 
[Fig. 3] A diagram showing definitions of the variable pixels on the encoded scanning lines and s pieces of 
reference scanning lines. 

[Fig. 4] A diagram showing the partial encrypters (decrypters) Eij and partial keys Kij. 

[Fig. 5] A diagram showing a flow of the scrambhng processing in the present invention's example. 

[Fig. 6] Logarithmic graphs plotted based on log 2 for the sequential pieces in the example of the present invention. 

[Fig. 7] A diagram showing autocorrelation functions. 
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[Fig. 1] 
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[Fig. 3] 
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(54) FACSIMILE EQUPMENT 

(57)Abstract: 

PURPOSE: To reduce the cost of an expansion board type FAX 
adaptor by imbedding a signature of a sender and a 
transmission document into a picture data and applying 
scramble processing to a coded picture data. 
CONSTITUTION: A signature sentence is imbedded to part of a 
document picture data by microprocessor processing. In this 
case, a signature ciphering key KG and a signature sentence Ns 
are inputted together with a transmission document M to 
generate a scramble key K1 thereby setting the mode to the 
ciphering process. A picture data coded by using the key K1 is 
sent while being transposition ciphering as two binary data 
subjected to block processing in the unit of power. A receiver 
side receives a key KG in common to a sender and a receiver 
and the transmission document is confirmed based on the 
adequacy of the signature sentence Ns. When the adequacy is 
confirmed, the key K1 is used to set the decoding process. 
When not adequate, it is aborted. Thus, since only the sender 
and the receiver cipher and manage the key KG, a 3rd party 
cannot detect the key. 
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[000 1] 

lc/<-v:*-jUzi>bf3.— 51 {)ilT/<iV^>t9&^t^) 10 
^afll¥S<tL, :^J-KFAX<!:a«;$tL-5:'r^i/5 

[0 0 0 2] 

T 37 r ^7 -> 5 >J l± t Bl^i^ca«¥a t /j: o T L^ 

-So LA^L. :SC»a<llcfc(t*:77^i/£'Jfl)=PJffl 
-5 IcflttN. 3l«#^i3HtS:»fl)fliatt'S:i:fl) 

tiit>t>. -«S:»A^t.«5X»lcSJ^*-e. ^(Dffifflg 20 

C I TT(Dai*ftlcJ:^StT77^v5'jaife(i. 7 
r ^ V 5 'J 4«*A^ b4ll*W0iXfllT-5' lcil^*T'X» 

ro«^B«Hl-M-r^>!^«J^l<^5J4,^|^^^TL^^i:L^^:^^)lc> 

( 1 ) SC-r A';U5 7.JS:i:fl)iafiiSI-V'««a3Rlci3lt*» 
3«a)tfrSICJ:41t«iiail(D«;«ttA<3&<5. (2) 

A^I»CztA<■e#^i:L^. (3) K 7— :7±-(f 

wHJSA<^&«*nTL^^, ^-z-c, 4iis*wa)jsi»-«a 30 
[0 0 0 3] T-i'^7PXL/^7 hP-'j^xawroft 

•Scfcys^M-eitey. *bi-. /^v^ixDx— siflis- 
FAX (*fci±/'?v=i>FAx) t«;-rst£3l;t<-Kia 

[0 0 0 4] *-r, t^*a)*-KFAX(7)1il5E«^l211 

iziTv-To *-KFAxi±. /"?va>a)ffi?ixp-v hicjf 
A L r misiuii=}t«E-r4xif«^ ic 7 t ^ v * u a« ^ 

i3cki;ftii»ffi^^fflt®«{i^ffl(DMOD 


-ftMrfe-So *fc. ^-KFAX-eii-^-z^pntiif-r? 

«gL, *-KFAXlc-fe=^zLiJ^-rai1il^J#fc-a:SC 

M t -r -5X^7 7 >3r;U«t«6* V 7 K 0X7IC J; y US 
[0 0 0 5] 

[3ie^*<»3iLJ:3.!:-r-5BH] ^CT, COT^M-p 
|±. ^93lE/< V 3>$ipJfflLfc*-KFAX j!i<*;>D JSMfll 

-KFAXA^sRtobtL*. *«?«0gM(±, Sfffl)*- 
KFAX>>XxAlcj3ltST:^'J'tr-va> ■ V7 H-^ 

xT^-fiPSM-iamt^tcit-e^siRHi-cifcy. v-r 

^7 p :fp-lr.>tl-roffla«lfl6^filffl LT V7 hOxTlcJ: 
y »« cfc i;x<7 ^ > 3iat -S C <!: (C fc* . 

[0006] 

[B«^«9i-r-5fc«)(D¥S] iitri^<DRH^«3i-r5fc 

[0007] 

tti'XxA^St-r^fP-yJ^Bl-eftSo jSlfllfl!lt?l±»«^ 
p-bxfcj:t;iit<*<b:^p-trx. »fllfli!-ei±BliE:^p-trx 
is J: 3^ p -b X (D ^ ii-f ;K 2 o 0 :^ p -b X A^ b fliJiE 

[0 0 0 8] jl«fl(licfciti,»€^p-trx-ei±. 

isit* jiiits:»©iEatt ^ si-r fc A I- A:^3X»fl)-a5 

3fp-b->-9-a)fliaaniiirj:y»«x^a«)ii^. ??*^<b 
Lfcafe3i«-r-5o •€xa)ato5i*4ifcx»ii«fl)-«5 
»<Dff*T^— x^7>:?;u-H-ric^-<o**eiS|-r 

-etStcDt-Ti). Hlft«li. Zfl)3^P-lrX(cfcL^■ciM 

fi:$:»Mi tmzm^mommmKo ts^nm^-XN, 

ts ■D^fl)Bt-§-<b:^p-trxicfcitiiS*i]rox^^>:^;u 
fi|Kl ^±JilcL. i«*^b3^p-txici^^T-r-5o 
[0 0 0 9] iit^^<b:^p-trx-ei±. ^^:feIl«T-^'A^b 


(3) 
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±fiE**L-5«Ki (i=1, 2, •••) \z^i)^mt^Jn 

-So 

[0 0 10] -15. 9t<fm\zts\fi>mmya-ii7.v\t. 

-9F (Mi ) J:y«iai**Lf=»«S:Ns roiE^tticj: 

t<!:(ca^:fp-i»xici»fi-irs. jsiic, Ns tmmotj: 

L^x— S( /j: c, (iM««*fc l±iSfllX»l±jEa -e/j: L^ t *ij 
[00 11] «*:?p-bx-ei*, Xj)?a4***Lfcii«x 

— 5'A^b±^*i^S«Ki (i=1, 2-) l=J:yBi4* 

L. ^^^*7'-^'A^b■^»7'-^»'si:SE^ft■r-5o 

[0 0 12] C<OJ:5l-fil3lE-r-5vXT-A-eii, 

L^o *fc. x^77>:?;u (ffl;^i7 7>:?;u) Kki ( i 

= 1, 2, ■••) liX»llflKD«3ilc«c?FLTffl«jiSI= 
fcLNT«*±fie**L*0-e, Iit*<bl!!!»©1iiftj3 

j:t;»B«Ko $ttc.^i:L^«3«A<z^^b^«^tb■r-sz 

i:(iBI|■(?*-6<tL^■5 , 

Ko = (ko (to ) I to =0, 
ko (to ) =0, 1 } 
lcteL^Tko (to ) =10i:t. EfrOk 
j = to - to ' 
(fcfc* »*Dfl) ko ( 1 0 ) = 1 -ett j = t 30 

Ns = {ns (u) I u = 0, 1, 

A^bftUiLfcl ha)»«T— ?ns (u) ^O?© 

(1) Aj (ai bi ) >0<7>i:#. Aj (bo ai ) 
^lANOAj (bi 32 ) ^I^SHfi-r-SJECbli, 

(a) XORns (u) = 0 <0 i: , 

(b) <t)i XORns (u) =1<Dt#a1 * 1 illli^ 
fi-^ftll-r-So 40 

(2) Aj (ai bi ) ^0(Di:#. Aj (bo ai ) 
^-Aj (ai bi ) +Z^m&titJiihli. 

(a) 0j XORns (u) = OOJi t-f-fl)**, 

(b) «j XORns (u)=1<Di:#a1 ^111*^^ 

S'^^B-rSo ±iB (1) St; (2) cDai*?!^^ (4) 

tti. fcfc*L. ko (to ) =oa)i:#l±»«-x— 5( 

[0 0 16] *fc, cro^micj:ya«)ii*iifc»«x 
— siii, o#ro^)«-e#«ica#-p^^,o 

(1) Aj (ai bi ) >0<Dt^. Aj (bo ai ) 50 


[0 0 13] 

[»«:^jS] 

ysEH-r-5. 

[0 0 1 4] ^^^*^b3fe*l»t s*<o#sijfe*it± 

(OjE<bl[3l5/j:i:lzoUTJUTro<fcaicS«t-5 (BI3# 

ai ■.n^itit§tl)i±(DftS^yiyly<fX i&iTRLt 
IBSEt-S) OftlgcDSE^blEillo /=f£L. mi RLItHt 

<o 

bi (J) :«j (1 ^ j ^s) #{iBj£S|t±a)a1 ICjl4 

is-rsai iHfero^^bH*. -T'S+ji^. ai ow.±m 

rnH^a^ tm^(Dt^lta^ iaiKrODRL©»*!]©li*, 

31 a)t.±mmtu^ tit^mt^itai ii^}:S\ziii 

RLaSfttDOBIto 

Aj (al bm ) :$titmma\ ^ bn. U) OSll. 

(/.j :Aj(3l bi ) roiUFtt^S^L. Aj (a 

1 bi ) A<fl»/d:b«0, Aj (ai bl ) m»Uh> 

lii t-rs. 

[0 0 15] Z(Ot^s re-yK©»«« 
1 , -, r - 1 ; 

(1) 

0 (to ' ) =1A^bko (to ) =1 ^-eroe-y h* 

(2) 

1 ^mj#![l£SII±a)X^blljKbi (J) niKOEKAj 
(ai bi ) a)«#tt«j \z. qfcr'yh(0»«X 

-, q-1 ; ns (u) =0, 1} 
(3) 

^1*NOAj (bi 32) ^AtmS.ti>i£i\i. 

ns (u) =0j o 

(2) Aj (ai bi ) ^0<Dtt. Aj (bo ai ) 

^-Aj (ai bi ) +z^ms.-riu^ii. 

ns (u) =«j . 

•tLT. fttB^ilfcl e-y h©»«-T-4i ns (u) * 
»«XNs LTl§^3tr-5o ±IH ( 1) XT/ (2) © 

«H!i)*ic (5) t-r-s. 

[0 0 17] m^xcomibSiwtzo^oizxmm^o 

ffii (««ro*S«(z*5f=.5RLfl)/<5t-» lc«t?FL 
XfitiiMOV. *3#A<»€X*«<^Lfcy. 

[0 0 18] 

i7.<p=j>-J)\,m<n±m 'o^\z. BH*^b^P-lr;^lcfc 
it5x^7 7:/:fvu«Ki (i=i. 2. •••) 
icoLxT^>-r. Ki li, liricttffls^ifcKi-i (sia 

(i»««Ko ) icXcJt, S:»ll«ix-4i0«itA>b* 
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itinr<D«Ki-i roe-y h^9lJA^b•^^{Dho fflfl)tf-> h 

{ki-1 ( (t i-1 +a) m( 
a = 0, 1 , -, I 
SttdiL. c*L^ 1 OillSdo ^^ic. 

I = (do + 1) mo d s 

Stl±a)IE<bHlt a 1 <b » I #{feit««k±a)lE^biim b 
1 McDEMlAi (ai bi ) 

Ki = {ki (ti ) It 
ki (ti ) =0. 

[0 0 19] cro«#-e(±, c(Oj:5tX»li«<oliit 

C = E (K, M) 
ttM-ti. fie*(0/\-K'^7iricJ:«lKlta-ei±E(D 

Ci =E (Ki , M) ( i = 

v7h';7x7vxxA-e«fiE-r4o «Ki ^A*-r-s 

vXTAI±iliMlcffiJl4-4W5^Hl*» («^»«) 

C = Ei1 (Kil, Ei2 (Ki2 

[002 1] C<Oi/X-TA-e(±iC (12) ^JJlTOT^Hj 

■e*8l-r*o *-r. x<77i/:f;u«Ki (i=i, 2, 
ij a3j:i;Kij ^RBB-rSo -r'S*?*,, ia4ic5i-rj:ai= 

ttKi (De'vh»5lJa)-«PA<1i«llS:'0^7Ai:LTfil 

5l#^«<3RW«5^^•«<tLTfflL^b^^4o o# 

!C, -»«^>J±IC«Hfl*tLfc»4»T-5»*2fl)'<#*J|lfi 

A<<tyjS**i-5o C(D«l«(03lE;h,^Bl5lc^v-ro 
[0 0 2 2] ZZ-efflL^b4^■5Eij li, ^t^V^ 

(1:1) (7):¥^tM«^^^tlt^^li^i:P,^i:L^„ -tc-e, * 

C = XOR (KXOR , M) 
M=XOR (KXOR , C) 

T?j5ys zomv-xit. it (1 3) 3E)i.ui±a d 4) 


ki (ti ) =«i tf*. cro»ff*5i«#riii«y 
10 )SLTX^7 7>:?;u« 

= 0, 1, -, r-1 : 
1} (9) 
[0020] 

mmtOlKIt} ¥XM$jiK-eBH^^I:LT»b*L4Bt 


(10) 


20 (c-T'ir^ttiSL, 


1, 2. ••■) (11) 

Eij fcJ:t;Wi^«Kij (i=1, 2, -: j=1, 2, 
-, n) ^^js-beiijl. *C,lc-t*iP,^«^Lr 

, -, Ein (Kin, M) ) -) (12) 

vxxA-ei±. (CPU) A<i#o»*3tw 

y , Bt^iife J: l;«*ll(i*^■rA^<D ;< ^ y rfi*«-eKa 

[0 0 2 3] 

[^»W¥iltH«i:^i:SCPU**] CPUA<}*olIl3* 

*^^¥«l*«*t■i)t.(Dl±lfip.^^■rl^s. laTi^cic-e 
ffll.^fccpul^&'fr^^^■r. fctx. ±a<Dx<7^:/:/^ 

**fiE-r4CPU(DUi?xaift*Ri:-r-5. LfcA^o 
droiyi^X^t-eT" KU'>>»^/or<ll'S:«SH(±0~2 

40 [0 0 2 4] 

IK (lit^*^^:» ti£v^:rtizmmt^vkmmmmi^i3: 

5fll«l±^JMt-Cfc4. JilTCroaiJt^XOR-e^vL, 

(13) 
(14) 

[0 0 2 5] 

50 [£:&P-T^' h] Lx5?X^Wro«-e'y h^ffiS^tLfc 
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[0026] 

C = ADD (KADO , M) 
= M+KADO mod 2^ 
t'S^o -rut)*,. «'«J(Ox-af|±ffi)ltKAD0 fc*lt¥ft 

»lli**i,So ±-eSE'<fc±JMt¥«*1iJiE-f-5cpui(|i 

llJaiil^|Sl±*-tt-5. 
[0027] 

Jt^EXT 1 -e^fo «KEXT1 (i) (i=0, 1, 

-, R-1) l±^vx^IftRlcs^lCLfcRflro«ill*^b 
jS^EW-efcy. ■E-*i^'*ia)fliii«iiiife<De-v hfi«* 

[0 0 2 8] 

[as^^aiWcTirrottlt] UvX5JftR-e«Si**i«^7 

K^xalIll*l:L^lcx*^b^cL^a55^•aMlc^^SllL, #ffl5 
fc(±oro<t#^l»L^fcaJ^^SMlcaffl■rs, ut^x, « 

KEXT2 (i) (i=0, 1, -, R-2) (±Uv;?.5ift 
A<Ra)i:#»3H»R-1«i(DE5iJtf, ■?-0«i«*liL/ 

ROLOTft^S^-To 
[0 0 2 9] 

[an^ii-«*ii] a (1 2) v^jLi^hi>f$^»i5i. 
i;a™*. «Ki (i=i. 2, •■■) hl!i5lJA^ 

bti«R«*t■€■a);^'<^>K^4fiE■r•5o ■r'5:*pi&. 
Ki A^b2^fcli3 e>> h^A*L. «105SE««IZ» 
^l^rnSa>1liI*»^*fitL. ffl5»flH*«Eij (j = 
1,2, -, n) (D»5lJ<tLT±IB1l03-K««ICJi 
M-r-So Plll#l=#li«3tJt-ei»«i:>Ei:*:^'< 

tt£h*>t^^mKU (j=1. 2. -, n) t, 
Ki (Oe-V h^5IJA^e,^»So fcfc-L, Bt^*»(OS»nlt 

R=16 (e->h) .t-r-Si:. *>S?(7)3l»1?!6J«<t$4x 

[S1] 


(15) 




110 

XOR 

0 0 0 

RO L 

0 0 1 

ROR 

0 1 0 

ADD 

0 1 1 

SUB 

1 1 1 
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1 0 

EXT2 


[«2] 


20 


3 - K 


XOR 
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ROL 
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ROR 
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ADD 

1 6 

SUB 
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EXTl 

64 (-4 X 1 6) 

EXT 2 

6 0 (-4 X 1 5) 


[0 0 3 0] 

»fllM-eWK-r'<#T— Sili (8, n, Ko ) -eifeSo 

30 [003 1] 

im^yaizX} S t e p 1 : XOTilMi , «€ttK 

0 ifeJ:t;»«XNs ^Xtitiitmzio <-0. ti ^ 

0, u<-o<fr-5. 

St ep2 : s*(7)jt«||^pt^'J!C»a-r5i:ftiC?? 
S t e p 3 : S t e p 4;!)^bS t e p 9$««^Ns 0) 
S t e p 4 : S t e p 5 A^b S t e p 8 *^9^*^bjiS|| 

<D*«A<«7-r -5 *T?jt y jg-r . 

40 S t e p 5 : «<bll*al *«tfflt-5. 

S t e p 6 : Ko *^b ko ( to ) S'^thO If '> 
fttULTI OjtJSdO ICSESIL. a (8) l-J:y I ^Sk 
^t^o « l#iH3fe*«±<O«<bIlillbl(0 ^ttttiL. 

ki (ti ) <fri>. ti <-ti +ii:-ri)o 

S t e p 7 : ko ( t 0 ) = 1 <i:blf. llWro kO (t 

0 ' ) =1A^bko (to ) =l*-C(De<> h-ftj ^SC 
(2) lc<fcyaS-f«o «j #!IS3£*«±©«<bll«b 

1 (j) $«SdlLTiC (4) ■e»«X— Jins (u) ^ffi 
ttjit\ ns (u) A<llttji*^Xfcttu^u + 1 tt 


(6) 
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S t o p 8 : t 0 t- ( t 0 + 1 ) mo d r tti, 

s t a p 9 : nmtM^Hi^nmt • BSk-ti>tmz. 
v + 1 (v = i, 2, -, s - 1 ) #ifii}fesiiics«f-r 
s t e p 1 0 : vtmtyu-b7.\z^nt^o 

[003 2] 

mmtZfa-bT.'i S t e p 1 : i = 1 t n ^ A* 
Step2:Stop3)!l^t>Stop 8 ^■^'<r<D??-f* 10 

X— Si ICO L^r « 7 -r 4 * -eit y ii-r o 

S t e p 3 : t i <-0. t i+1 i-Otti>o 
St«p4:Stop5A^bStop8 ^ <3-r— ^ ji 

Stop5:Step6A^^>Step7 *^$*-(b3£*t* 

S t e p 6 : X^bll«a1 ^^00-^0 

S t e p 7 : Ki A^b ki ( t i ) S'^tho i£'U 

attiLn Ojt«do iZ^mt. S (8) |CJ:IJ I 

s-r -s. » I #i«**ii±(D«^kii« b 1 (I) ^mta 20 

ki*i (ti*i ) =«i ir-rSo ti = (ti +1) m 
od r. ti+1 = (ti+1 +1) mod r tti>o 

Steps: nmtM^itLt:nmttitmz. ^mt 
(v = i, 2. -, s-1) #iiSj&*it(zH«fr-5, 

S t o p9 : Ki A^bnafl)lE«l«^*ll^±IH«(7)^- 
S t B p 1 0 : 7 KUXm (=0~2R -1 ) ±a)»-* 

r—9^±m ^^fcnm»\z j: y »Jitffl« $ tit / ^y 7 

T>^'J±a)TKUXm' (=0~2l' -1) Ic|e« 30 

7K^xoA^bl^^lctli:^l -eis-ri,, i^-i+it 

[0 0 3 3] 

mmzfa-izx] S t o p 1 : SffliT— ? F (Mi ) , 
EIE«KO ^XtltitmztO ^0. ti «-0, u<- 

ot-r^o 

S t e p2 1 ??4»x-4i*s3E«glij-a*LT>=E'JIC 
Step3:Stop4A\t)Step1 0^*€XNs 

©a^*A<«7-r«*-tf«iyii-ro 40 

S t e p 4 : ff^T^-^ ^ 1 jfe*lt^^a*L. ^mtik 
S t o p 5 : S t e p 6A^bS t e p 9 t:^mtMiittL 

<D jt« 7 1 4 *-e« y ist o 

St 8p6 :|E^bll«a1 

S t o p 7 : KO A^b ko ( to ) ^^tho t'y 

fttiJLri ojt»do it (8) (cfcy i 

s-rso m I ♦f»*»ii±(D«^kiiiibi (I) ^«aiL, 

ki (ti ) irT-So ti ^ti +^tti>, 

Step8:kO ( to ) = 1 JSbli, ttlWrokO (t 50 


0 ' ) =1A^bko (to ) =i*-^roe-> h«j 

(2) lcJ:y3iS-rS. «j»!li3fe««±fl)«<bll«b 

1 U) ^tttiJLTa (5) -e^^T-^lns (u) ^tt 

ffl-r-So ns (u) A<ttai**Lfcttu^u + i .t-r 

Step9:t0<-(t0+1)mod r t-f*. 
S t e p 1 0 : ^^{bj£S«$ff 1 #!ijt«(tl:. ft V 
#!fa*«fl*»v + 1 (v = 1, 2, -. s-1)#lil 

ft^mz9.mtio 

S t e p 1 1 : Ns A<iEa'Ei:iblS(H»:/P-bXlcl^fi 

^■a-e'Sitiiiii. 5t«x— siF (Mf ) 

[0 0 3 4] 

[tt#:^P-b;^] Stopi : \=AtL. n * 
S t e p 2 : S t e p 3A>bS t e p 1 O^t^XO)^ 

^^-^ i=oi,Nr»7-r«*-ei» y Ji-r. 

S t e p 3 : Sffllx-' ? F (Mi ) An?, 2" t'V htta 

■r*tft(=ti -e-o. ti*i <-o^-r*o 

S t e p 4 : «Ki nS<DlE11llt*il$±lHttfl)i] 

-K11«lc*M-r«o 

S t e p 5 : T KU;?.m (=0~2R - 1 ) ±©Sf«T 

-■ ? *±j«**ifca<»»icj: y»jjftffl«**Lfc/^v77 

'J±(D7 KUXm' (=0~2R -1) ICCIIL, 

7K^;^oA^b«^l-ai*■r•5o i <- 1 + 1 t-r-So 

S t e p 6 : a#*ilfc»^*T^— Si^Htfix— SilZlE* 
L. ****lfc56*«il=OLNTS top7A^bStep 

1 o^^ys-To 

Step7:Step8A^bStep9 *»<*'fb3fe*l» 

<D3i«A<«7-r4*-e«yig-r. 

steps: SE<blliRa1 ^tttB-fS. 

S t e p 9 : Ki 3!i>b ki ( t i ) ^^t^ho \£v 

tttULTi oitftdo \zmkL. a (8) izj:y i i^* 
s-r^o m I #{Sit<«±o)XibBmbi (I) $4tajL, 

ki+1 (ti+1 ) t-r-S. ti = (ti +1) m 

od r. ti+1 = (ti+1 +1) mod rir-rS. 
S t e p 1 0 : nmtit%m^% 1 « v 

#8S3E3l«l^»v + 1 (v = 1, 2, -, s-1)#Bg 

ik^mzumtio 

[0 0 3 5] 

isjijA^ ^-^^■lc^>^^'ix-eab*A^5)!)^^8^w■r4fctt, 

■r■e(c+^^^C«7>^^'A14A<|IW**lTL^47^'- K/^ 
•J? i/ 7 h U vX ^i (C J; S M3R5iJ©»fll5iJ t JilT0« S 

3;r<7v5'JX»©??*^b:^ai:LTMH:^a*. A* 
X»<tLTCC I TT©xXh^-V-hNo. 4^ffll,^ 

[0 0 3 6] (1) a©ffl»a)*ie«* 


(7) 
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31i:l±2tt»5iJ±a)1 *fcliO©pffl(D3£t/-e$)ys 

a>ia5»i±o*fciii -efcSo zot^. Mm\v\t^t. 
ftR* 1 ee-v »*tfr<fra)a»n-&3 2tLTx^ 

^>:?;ULfcx— S^(C■^L^Tjl(7)tt^8^ll'<fc. 0 61* 

'^7:'ftLfcttil*s^x-r. fcfiL. (1 10 

1 r-j 

Cq (h) - 1 in S 

j -~ 2 j + 1 r— j 


fcliO©il(Dfl«lCOLNT. 

hiroaroflft} =2 (16) 

^»t,^^Tl,^-5, n^iiJD*lt-5<!:*c.lzftff^cfSj|A<tt 
[0037] (2) iBffiMHtt 

[ft1] 

'..K (17) 


l=J:yn*Lfc (11) o fcf=L. {yr } (i2fll3S5iJ± 
(Oa*. hl±2]I {yr 1 t {yr*h } IHKDffiH^ "ttl 

h9to^ce)iico (h) =0 
h = 0>a:blico (h) = 1 

R*1 ee-y h, S»n^3 2i:LTX<75>:^;ULfc 

hui?x^iroiaffliHiM«itH». it (i 8) ^isiSiU 

[003 8] 

i;36flix»©iEai4$s^x-rfcfero»€S:*i«tx— J'© so 
^c^arofiKfflicjiy, *3ewicj:y*a$^i*a;3i7i?- 

KS«0FAXTa'':^^-!i/N-K';7X7W(C«aTffc4 

c.!:*^bffi««^■Tffcy, t^oT. affifinwfflTdf^f^i 


(18) 

«'5:<flcM-r«1M««i*56lt/j:L%fi|ji5A<*«o *fc, *« 
BR0Z?T<7iyZ')it. gltt*ffl^b$^^TL^-5*-KFA 

-i5«H-iajip-r*f£it-eii8i»riii-e*y. ««fttf« 
[eiffia>fiJii7'.>:K^] 

[HI] KFAX(7)iija«*s^-riiio 

[0 2] *36Wro-Sllfifii|(rfc(t*«S«ttvX7^A^ 
[H3] ^^^b£S«l^s*09#JISjt«t±a)X^bB3lt 
[04] iS^iit^^ll EijlSctt/ffi^ttKlj^ 

[815] *«ei(D3ll6«l=fc(t-5x^7>:^;ufflSfl)3lE 
[06] *«M(0*»«lcj3lt4il<Dfl»f a^JS-kL 
[0 7] gBffiHMtt$^x-r0. 


Ki 


Ell(ROR) Km (4 bits) El2(X0R) Kl2(16 bits) El3 
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software hardware 



personal computer 


^^y Ko Ns 


signature 
process 


J^y Ki 


encryption 
process 


Ki- 


key 


[ sender ] 
•^ey Ko Ns verification 


authentication 





process 


output 
document 

kev Ki 

decryption 


M * 

process 

n 



^ Ki- 

[ recipient ] 


' key 
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ref. line: s b^,^^^ 


'mm 1 


ref. line: j b^^^^ 



i 1 1 1 wm, 

coding line 

(aj^bj^)-5 



^0 

^1 ^2 


■■^v scrambled (n=32) 

■ X / 



MH code 



shift / \ 


register \ 



length 


[135] 
Bub-scrainblers 


coded 

data 





key 

Ki 






:Kh 

iKi2! • • 

••- :Kinj 





ciphered data 


software scrambler with n steps 
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